Privacy Policy

1. About us

MomentPool is a service for creating temporary, private group photo albums that are shared by a single link and deleted on a date the host chooses.

For privacy questions or to exercise any of the rights described in this policy, contact us at hello@momentpool.app.

2. Scope of this policy

This policy covers this website and the MomentPool service, including creating an account, creating albums, uploading and downloading photos, joining an album as a guest, and paying for an album.

Privacy laws differ between countries. Section 14 sets out the additional rights that apply under the GDPR, California law, and Australian law.

3. Information we collect

We collect only what the service needs to work, and nothing beyond it.

• Account details. Your email address, the password you set, and a display name and profile image if you choose to add one. Passwords are stored only as hashes by our authentication provider, never in readable form.
• Album details. The album name, the start and end dates you set, and an access PIN if you set one. PINs are stored only as a cryptographic hash, never as the PIN itself.
• Guest details. The display name a guest enters when they open an album link, and the time they were last active in it.
• Photos. The image files uploaded to an album, together with the original filename, file type and pixel dimensions.
• Payment details. The amount, currency, and a payment reference. Card numbers are entered directly with our payment processor and never reach our servers.
• Technical data. Your IP address and basic request information, used to apply rate limits and to keep the service secure.
• Usage data. How the service is used, collected through analytics as described in section 4.

Your photos are just files to us. We never scan them with facial recognition, never analyse what is in them, and never use them to train machine learning models. We do not sell your personal information either, and we never hand it to advertisers.

4. Cookies and analytics

We use PostHog to understand how the service is used, so we can improve it. PostHog sets cookies in your browser and records events such as pages viewed and features used.

Where the law requires consent for these cookies, including across the EEA and the UK, we ask for your consent before any analytics cookies are set, and you can withdraw it at any time. Cookies that are strictly necessary to deliver the service, such as keeping you signed in, are always set.

You can also block or delete cookies in your browser settings, though parts of the service may stop working correctly if you block essential cookies.

5. Information we use

We use personal information only for the purposes listed below.

• To provide the service, including creating albums, hosting photos, and letting invited people view and download them.
• To send album expiry reminders so nothing is lost before deletion.
• To take payment for an album, and to keep the tax and accounting records the law requires.
• To send you account emails, such as confirming your address, resetting your password, and receipting a payment.
• To measure and improve how the service is used.
• To keep the service secure, prevent abuse, and apply rate limits.

If you are in the EEA or the UK, section 14 sets out the lawful basis we rely on for each of these purposes.

6. Photos of other people

Albums are shared spaces, and photos uploaded to them often show people other than the person uploading them.

If you create or upload to an album, you are responsible for having the agreement of the people in your photos to share them in that album. Only upload photos you have the right to share. If you are photographed at someone else's event and want a photo removed, ask the album host to delete it, or contact us at hello@momentpool.app and we will help.

Anyone with the album link, and the PIN if the host set one, can see every photo in that album. Treat the link as you would the key to a shared folder.

7. Information we share

We share personal information only with the providers we need to run the service. Each is bound by contract to protect it and to use it only on our instructions.

• Supabase, for database hosting, user authentication and photo storage. Data is held in the US and the EU.
• Stripe, for payment processing. Stripe collects and holds your card details directly.
• PostHog, for usage analytics. Hosted in the US.
• Resend, for sending album expiry reminders and account emails.
• Vercel, for hosting this website.

We may also disclose personal information where we are legally required to, such as in response to a valid court order, or to establish or defend legal claims.

8. International transfers

Your personal information may be stored or processed outside the country you live in, including in the US, the EU and Australia.

Whenever personal information crosses a border, we rely on recognised transfer safeguards so that it keeps an equivalent level of protection. These include adequacy decisions, Standard Contractual Clauses together with the UK Addendum where relevant, and certification schemes such as the EU-US Data Privacy Framework.

9. Information we keep

• Photos and album contents are permanently deleted when the album expires on the end date its host chose. This deletion is automatic, and it is the core promise of the service.
• Account information is deleted within 30 days of you closing your account.
• Guest display names are deleted with the album they belong to.
• Payment and transaction records are kept for 7 years, as tax and company records law requires.

10. Your choices

You can always do any of the following.

• View and update your account details, including your display name, from your account settings.
• Delete an album at any time, which deletes every photo in it.
• Close your account, which deletes your personal information as described in section 9.
• Turn analytics cookies off, as described in section 4.
• Email us at hello@momentpool.app to ask for a copy of your information, to correct it, or to have it deleted.

We aim to respond to any request within 48 hours.

Additional rights may apply under local law, as set out in section 14.

11. Emails we send

We only send emails the service itself requires, such as confirming your email address, resetting your password, receipting a payment, and reminding you before an album expires so nothing is lost.

We do not send marketing or promotional email, and we will never pass your email address to another company for their own marketing. If that ever changes, we will ask for your consent first rather than adding you automatically.

12. Children

You must be at least 16 to create an account or host an album if you are in the EEA or the UK, and at least 13 everywhere else.

We do not knowingly collect personal information from children below these ages. If you believe a child has given us their information, contact us at hello@momentpool.app and we will delete it.

13. Security

Photos and data are transmitted over encrypted connections and stored with our hosting providers under their security controls. Album links are generated using cryptographically random values that cannot be guessed, and album PINs are stored only as hashes.

No online service can promise perfect security. If a data breach occurs that is likely to put your rights at risk, we will notify you and the relevant regulator as required by the law that applies to you.

14. Regional rights

Some privacy laws grant rights beyond those in section 10. Where they apply, they apply in addition to everything above.

• EEA and UK (GDPR). We are the data controller for your personal information. We rely on contract to provide the service and take payment, legal obligation to keep tax records, consent for analytics, and legitimate interests for security. You may access, correct, erase, restrict, object to, or port your information, withdraw consent, and complain to your supervisory authority.
• California (CCPA/CPRA). Section 3 lists the categories we collect, which include identifiers, commercial information, network activity, photos and approximate location. We do not sell personal information or share it for cross-context behavioural advertising. Account credentials are sensitive personal information, used only to authenticate you. You may ask us to disclose, correct or delete your information, may use an authorised agent, and will never be treated differently for asking.
• Australia (Privacy Act 1988). We handle personal information under the Australian Privacy Principles, and disclose it to overseas recipients in the US and the EU as described in section 8. You may request access or correction, and complain to the OAIC at oaic.gov.au. We report eligible breaches under the Notifiable Data Breaches scheme.

To exercise any of these, email hello@momentpool.app.

15. Changes to this policy

We may update this policy as the service develops. If we make a change that materially affects how we use your personal information, we will tell you by email or through the service before it takes effect. The date at the top of this page shows when it was last updated.

16. Contact

For any privacy question, request or complaint, email hello@momentpool.app.